mirror of https://github.com/garrytan/gstack.git
a64106535b
The Sourcebot side got this in the last round; gbrain had the same hole — search() and export() sent repo-derived query text into a possibly-remote DATABASE_URL with no consent check and no egress receipt, bypassing the deny-tier veto. Both now assert consent before any bytes move, receipts record the actual consent state (never a hardcoded true), and search receipts carry the query's sha256. gbrain stays fail-closed: the adapter cannot see where DATABASE_URL points, so every send requires consent. 7 new tests, red-first. |
||
|---|---|---|
| .. | ||
| contract.ts | ||
| gbrain-adapter.ts | ||
| graphify-adapter.ts | ||
| index.ts | ||
| picker.ts | ||
| selection.ts | ||
| sourcebot-adapter.ts | ||
| suggest.ts | ||